This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QJ1CsNmZtrMfqsM-LahkitaRmoc.roa File: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (raw, json) Hash identifier: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E= Subject key identifier: 40:9D:42:B0:D9:99:B6:B3:1F:AA:C3:3E:2D:A8:64:8A:D6:91:9A:87 Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7 Certificate serial: 019B78A34CD9A3601E049771F0D79480B54B Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QJ1CsNmZtrMfqsM-LahkitaRmoc.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.104.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4c:d9:a3:60:1e:04:97:71:f0:d7:94:80:b5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=409d42b0d999b6b31faac33e2da8648ad6919a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:79:dd:44:2a:5e:1a:3f:b0:13:e3:a9:ae: 93:b6:18:0c:3a:74:4a:75:a4:eb:f6:46:83:ea:c5: 02:3e:c6:fe:a1:12:39:f7:45:4e:6b:a7:35:2b:8f: 38:64:d8:b4:b3:10:b6:e3:dc:67:18:b0:9b:00:ee: be:c3:07:86:d2:58:27:08:39:9e:f5:7e:f8:59:7b: 48:ea:35:27:38:13:1f:8b:1d:30:52:0d:f3:c4:29: fe:31:8f:00:f8:68:ee:17:14:a9:b7:1a:74:cf:01: b6:b3:19:c4:bc:b9:2d:74:93:23:b7:72:45:1c:3d: 07:75:c1:4b:7e:d1:f4:f9:3e:87:a1:da:76:f4:3d: 7d:9f:96:5d:3b:eb:c0:76:78:61:b7:f9:79:e6:27: 1a:ed:be:87:a7:1f:75:8e:29:f5:3c:2b:66:6f:62: 8e:d0:4b:ed:d3:c3:2d:19:de:dd:72:52:d9:13:56: 85:6f:17:82:bb:26:97:9f:16:94:b7:b1:bd:a8:d7: 23:04:8e:46:c1:20:72:c5:36:bb:0a:fa:4f:c1:88: a9:ed:20:69:c9:06:61:8a:71:ba:f4:0b:3b:08:1f: 61:7e:b3:5f:9b:b8:35:0d:58:48:98:9d:4a:a8:16: 66:f6:d7:0f:c8:a7:02:29:de:98:15:9e:8e:aa:33: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9D:42:B0:D9:99:B6:B3:1F:AA:C3:3E:2D:A8:64:8A:D6:91:9A:87 X509v3 Authority Key Identifier: keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QJ1CsNmZtrMfqsM-LahkitaRmoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.147.0/24 Signature Algorithm: sha256WithRSAEncryption 06:fe:ea:b0:01:7c:55:b9:aa:ce:7f:ff:26:38:d6:0d:4b:81: fb:67:23:60:f9:b3:72:ba:69:0b:17:bf:27:4f:a7:2b:8e:c2: dd:31:99:32:9c:bc:9a:cd:ba:f4:d0:cf:c6:23:d1:28:d0:c4: c3:4f:cb:26:21:4b:59:16:f5:3c:0f:b9:19:ba:7f:9f:fb:13: aa:c1:97:0f:d7:f1:30:f1:54:b9:ee:54:be:ac:fe:82:00:5a: 19:21:c0:2b:4d:e1:34:65:27:5a:39:84:7a:03:14:20:74:4d: 8f:3a:7f:8a:df:59:9e:26:26:ad:89:09:cd:cf:7f:8f:e0:a1: e8:68:65:9f:64:56:53:dd:6a:60:e7:0c:95:bf:2c:a1:f5:6d: 14:e0:90:ee:0d:ef:7b:57:20:57:b6:dc:85:28:a8:97:65:8b: a8:ee:2b:99:db:bd:c0:d8:5b:18:ae:db:f3:ee:e0:66:8a:e6: c1:a1:63:f9:d6:e0:b1:f3:95:14:d4:29:f2:72:38:3e:22:4d: 56:a2:bf:d4:57:bb:23:d2:b0:b9:e6:84:15:b9:16:f1:96:a9: 18:52:12:10:70:d9:1f:13:14:ff:c6:e6:46:17:3d:0d:de:49: 5d:5b:5e:64:84:ac:c5:20:ab:64:cd:ab:cc:15:d9:59:09:f1: 3a:a3:5b:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0zZo2AeBJdx8NeUgLVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3 OTBjZjcwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDlkNDJiMGQ5OTliNmIzMWZhYWMzM2UyZGE4NjQ4YWQ2OTE5YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pt53UQqXho/sBPjqa6TthgMOnRK daTr9kaD6sUCPsb+oRI590VOa6c1K484ZNi0sxC249xnGLCbAO6+wweG0lgnCDme 9X74WXtI6jUnOBMfix0wUg3zxCn+MY8A+GjuFxSptxp0zwG2sxnEvLktdJMjt3JF HD0HdcFLftH0+T6Hodp29D19n5ZdO+vAdnhht/l55ica7b6Hpx91jin1PCtmb2KO 0Evt08MtGd7dclLZE1aFbxeCuyaXnxaUt7G9qNcjBI5GwSByxTa7CvpPwYip7SBp yQZhinG69As7CB9hfrNfm7g1DVhImJ1KqBZm9tcPyKcCKd6YFZ6OqjMRuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFECdQrDZmbazH6rDPi2oZIrWkZqHMB8GA1UdIwQY MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt N2YyMGVmMDJmMjY0LzEvUUoxQ3NObVp0ck1mcXNNLUxhaGtpdGFSbW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0 LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiTMA0G CSqGSIb3DQEBCwUAA4IBAQAG/uqwAXxVuarOf/8mONYNS4H7ZyNg+bNyumkLF78n T6crjsLdMZkynLyazbr00M/GI9Eo0MTDT8smIUtZFvU8D7kZun+f+xOqwZcP1/Ew 8VS57lS+rP6CAFoZIcArTeE0ZSdaOYR6AxQgdE2POn+K31meJiatiQnNz3+P4KHo aGWfZFZT3Wpg5wyVvyyh9W0U4JDuDe97VyBXttyFKKiXZYuo7iuZ273A2FsYrtvz 7uBmiubBoWP51uCx85UU1Cnycjg+Ik1Wor/UV7sj0rC55oQVuRbxlqkYUhIQcNkf ExT/xuZGFz0N3kldW15khKzFIKtkzavMFdlZCfE6o1vt -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:28 2026 by rpki-client